Web Wiz Forums

Print Page | Close Window

HTTPS

Printed From: Web Wiz Forums
Category: Web Wiz Web App Support Forums
Forum Name: Web Wiz Forums
Forum Description: Support forum for Web Wiz Forums application.
URL: https://forums.webwiz.net/forum_posts.asp?TID=26267
Printed Date: 03 April 2026 at 6:33am
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com

Topic: HTTPS

Posted By: stan_18830
Subject: HTTPS
Date Posted: 17 September 2008 at 4:42pm

Is there a way to set the login form "Action" reference so that it uses HTTPS instead of HTTP? Right now our forum members are sending their passwords in clear-text.

Replies:

Posted By: WebWiz-Bruce
Date Posted: 17 September 2008 at 5:02pm

If you setup your site to use SSL (HTTPS) to connect to it then the whole forum will run under SSL.

You would just disable in IIS the use of HTTP and force everyone to use HTTPS to connect to your forum. You would also need to update any links to your forum and the forum path form within the admin area.

-------------
https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting
https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting

Posted By: stan_18830
Date Posted: 02 October 2008 at 2:43pm

Thanks BBcodes,

That was my initial approach, (I used the servervariables object to redirect from HTTP to HTTPS). But this opened me up to having to review and alter all of the content components (img and such).

Because our forum resides on a server that also transacts Payment Card Industry (PCI) business we are required to encrypt all login screens. I'm sure that, with enough arguing, I can prove that this form, in no way, opens our PCI data or transactions to additional risk but this would have to be done each time our system is audited and would always invite questions. I would much prefer that the login form have an SSL option in the first place.

Stan